CVE-2025-27769
Low · 2.6CVSS
2.6
EPSS
0.1%
Published
Mar 10, 2026
CISA due date
—
The record
A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1). Affected devices contain improper access control that could allow an attacker to reach unauthorized services via the charging cable.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-81871 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-923
- CVE-2026-57028 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923
- CVE-2026-33803 An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in… CWE-923
- CVE-2026-55655 A flaw was found in OpenSSH. CWE-923
- CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at… CWE-923
- CVE-2026-12039 Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to… CWE-923
- CVE-2025-36145 IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and… CWE-923
- CVE-2026-22726 Route Services can be leveraged to send app traffic to network destinations outside of an… CWE-923